n/a vulnerabilities and CVEs
Known vulnerabilities affecting n/a, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.
49 vulnerabilities tracked. 1 confirmed exploited in the wild. 2 with public exploit code.
- 7.5 OpenSSL Information Disclosure Vulnerability
- 9.1 DB-GPT v0.7.5 and 0.8.0 contains directory traversal in useexamplefile (packages/dbgpt-app/src/dbgptapp/openapi/apiv1/examplesapi.py:129).
- 9.1 Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read notes in another…
- 8.8 Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows unauthorized attackers to…
- 8.8 Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in…
- 7.8 An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to…
- 7.8 An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego…
- 7.5 A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended…
- 7.5 Insecure permissions in WikiAndPad alpha/beta v0.2alpha03 (versionCode 200300) allows unauthorized attackers to export the application's…
- 7.5 Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to…
- 7.5 Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to arbitrarily manipulate…
- 7.5 Insecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows unauthorized attackers to trigger the OTP-clipboard…
- 7.5 osmo-msc through 1.15.0 contains a stack-based buffer overflow in decodemmename() in src/libmsc/sgsiface.c.
- 7.5 An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and…
- 7.4 bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point.
- 7.1 Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl.
- 6.5 SuperAGI up to v0.0.14 contains an improper access control vulnerability.
- 6.1 Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary code via the…
- 5.4 qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity…
- 5.3 Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.
- 5.3 A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows attackers to scan…
- 5.1 Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an exported component,…
- 5.1 An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects…
- — Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA (Registration…
- — A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path.
- — A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the imsregistrarpcscf module.
- — A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the imsqosnpn module.
- — OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM NudmUEAU Generate Authentication…
- — An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker…
- — A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server.
- — An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated…
- — A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling.
- — Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill…
- — libarchive 3.4.1 through 3.5.1 has a use-after-free in copystring (called from douncompressblock and processblock).
- — A vulnerability in mkv::eventthreadt in VideoLAN VLC media player 3.0.7.1 allows remote attackers to trigger a heap-based buffer overflow…
- — The Control function of demux/mkv/mkv.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
- — The mkv::virtualsegmentc::seek method of demux/mkv/virtualsegment.cpp in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
- — A heap-based buffer over-read exists in DemuxInit() in demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 via a crafted .mkv file.
- — The Control function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1 has a use-after-free.
- — In VideoLAN VLC media player 3.0.7.1, there is a NULL pointer dereference at the function SeekPercent of demux/asf/asf.c that will lead to…
- — A divide-by-zero error exists in the SeekIndex function of demux/asf/asf.c in VideoLAN VLC media player 3.0.7.1.
- — A divide-by-zero error exists in the Control function of demux/caf.c in VideoLAN VLC media player 3.0.7.1.
- — A heap-based buffer over-read in xiphPackHeaders() in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 allows remote attackers to…
- — The xiphSplitHeaders function in modules/demux/xiph.h in VideoLAN VLC media player 3.0.7.1 does not check array bounds properly.
- — An issue was discovered in the Linux kernel through 5.2.9.
- — An issue was discovered in zlibdecompressextra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7.
- — In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference…
- — In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in…
- — There is a reachable assertion abort in the function jpcdecprocesssot() in jpc/jpcdec.c in JasPer 2.0.12 that will lead to a remote denial…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that n/a is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other products tracked here
Windows 11 version 26H1 Windows 11 Version 25H2 Windows 11 Version 24H2 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows Server 2022 Windows 10 Version 22H2 Windows 10 Version 21H2 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows 10 Version 1809 Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 10 Version 1607 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 MediaTek chipset Red Hat Enterprise Linux 9 Windows 11 Version 26H2 Red Hat Enterprise Linux 8 Windows 11 Version 23H2 Microsoft Edge (Chromium-based)